Open Source OpenJDK

productDE

cpe:/a:oracle:openjdk:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

4critical6high51medium28low

updated 2026-10-27

vulnerabilities (127)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-30749US	—	1.27% (70th)	Exploit	no fix	2025-07-15	—
CVE-2026-91403US	critical9.1OT high	0.31% (24th)	Exploit	no fix	2026-10-21	—
CVE-2026-22008US	—	0.21% (11th)	Exploit	no fix	2026-04-21	—
CVE-2026-22003US	—	0.10% (1st)	Exploit	no fix	2026-04-21	—
CVE-2022-32215US	medium6.5	70.2% (99th)	—	no fix	2022-07-14	—
CVE-2025-30761US	—	5.23% (92nd)	—	no fix	2025-07-15	—
CVE-2019-11068US	critical9.8	5.19% (92nd)	—	no fix	2019-04-10	—
CVE-2020-14779US	medium4.3	3.76% (90th)	—	no fix	2020-10-21	—
CVE-2019-2983US	low3.7	3.73% (90th)	—	no fix	2019-10-16	—
CVE-2019-2981US	low3.7	3.73% (90th)	—	no fix	2019-10-16	—
CVE-2019-2973US	low3.7	3.72% (90th)	—	no fix	2019-10-16	—
CVE-2019-2949US	medium6.8	3.59% (89th)	—	no fix	2019-10-16	—
CVE-2019-2987US	low3.7	3.52% (89th)	—	no fix	2019-10-16	—
CVE-2019-2964US	low3.7	3.52% (89th)	—	no fix	2019-10-16	—
CVE-2019-2962US	low3.7	3.52% (89th)	—	no fix	2019-10-16	—
CVE-2019-2992US	low3.7	3.45% (89th)	—	no fix	2019-10-16	—
CVE-2019-2975US	medium4.8	3.31% (88th)	—	no fix	2019-10-16	—
CVE-2019-2945US	low3.1	3.27% (88th)	—	no fix	2019-10-16	—
CVE-2019-2988US	low3.7	3.27% (88th)	—	no fix	2019-10-16	—
CVE-2019-2978US	low3.7	3.27% (88th)	—	no fix	2019-10-16	—
CVE-2019-2989US	medium6.8	3.22% (88th)	—	no fix	2019-10-16	—
CVE-2020-14803US	medium5.0	3.19% (88th)	—	no fix	2020-10-21	—
CVE-2019-2894US	low3.7	3.14% (88th)	—	no fix	2019-10-16	—
CVE-2020-14798US	low2.6	2.72% (86th)	—	no fix	2020-10-21	—
CVE-2019-2958US	medium5.9	2.63% (85th)	—	no fix	2019-10-16	—
CVE-2019-2977US	medium4.8	2.61% (85th)	—	no fix	2019-10-16	—
CVE-2019-2999US	medium4.7	2.60% (85th)	—	no fix	2019-10-16	—
CVE-2020-14796US	low2.6	2.49% (85th)	—	no fix	2020-10-21	—
CVE-2020-14781US	medium4.3	2.32% (83rd)	—	no fix	2020-10-21	—
CVE-2019-2933US	low3.1	2.30% (83rd)	—	no fix	2019-10-16	—
CVE-2020-14782US	medium4.3	2.27% (83rd)	—	no fix	2020-10-21	—
CVE-2020-14792US	medium5.8	2.23% (83rd)	—	no fix	2020-10-21	—
CVE-2019-2996US	medium4.2	2.20% (82nd)	—	no fix	2019-10-16	—
CVE-2020-14797US	medium4.3	2.20% (82nd)	—	no fix	2020-10-21	—
CVE-2022-21634US	—	1.75% (78th)	—	no fix	2022-10-18	—
CVE-2024-21217US	—	1.15% (67th)	—	no fix	2024-10-15	—
CVE-2023-42950US	high8.8	1.07% (65th)	—	no fix	2024-03-28	—
CVE-2024-54534US	critical9.8	1.04% (64th)	—	no fix	2024-12-12	—
CVE-2024-21208US	—	1.01% (63rd)	—	no fix	2024-10-15	—
CVE-2022-21597US	—	0.93% (60th)	—	no fix	2022-10-18	—
CVE-2024-21235US	—	0.93% (60th)	—	no fix	2024-10-15	—
CVE-2025-0509US	medium6.8	0.90% (60th)	—	no fix	2025-02-04	—
CVE-2025-21587US	—	0.83% (57th)	—	no fix	2025-04-15	—
CVE-2024-21210US	—	0.81% (57th)	—	no fix	2024-10-15	—
CVE-2025-50106US	—	0.75% (55th)	—	no fix	2025-07-15	—
CVE-2026-20652US	high7.5	0.70% (53rd)	—	no fix	2026-02-11	—
CVE-2025-12183US	—	0.70% (53rd)	—	no fix	2025-11-28	—
CVE-2024-21211US	—	0.67% (52nd)	—	no fix	2024-10-15	—
CVE-2025-30752US	—	0.67% (52nd)	—	no fix	2025-07-15	—
CVE-2026-34282US	—	0.64% (50th)	—	no fix	2026-04-21	—

showing 50 of 127

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control30 CVEs
CWE-20Improper Input Validation24 CVEs
CWE-266Incorrect Privilege Assignment20 CVEs
CWE-400Uncontrolled Resource Consumption19 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor8 CVEs
CWE-416Use After Free6 CVEs
CWE-248Uncaught Exception5 CVEs
CWE-269Improper Privilege Management5 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)127 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan